Move alerting to Python

.cursor/rules/git-commits-no-cursor.mdc

@@ -0,0 +1,23 @@
+---
+description: Never add Cursor as git commit author or co-author
+alwaysApply: true
+---
+
+# Git commits — no Cursor attribution
+
+Do **not** add Cursor to commits in any form:
+
+- No `Co-authored-by: Cursor <cursoragent@cursor.com>` (or variants)
+- No `--trailer "Co-authored-by: ..."` for Cursor
+- Author must remain the human user only
+
+When creating commits via `git commit`:
+
+- Use a plain `-m` message or HEREDOC **without** co-author trailers
+- If a tool or template adds Cursor automatically, amend or rewrite the message before push
+
+Repo ships `.githooks/prepare-commit-msg` to strip Cursor trailers locally. Enable once per clone:
+
+```bash
+./scripts/install-githooks.sh
+```

.dockerignore

@@ -2,7 +2,5 @@
 # NOT for the python api (see api/.dockerignore for that)
 common/node_modules/**
 frontend/node_modules/**
-alerting/db_data/*
-alerting/node_modules/*
 api/*
 docs/*

.githooks/prepare-commit-msg

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+# Remove Cursor co-author trailers (IDE/agent sometimes inject these).
+set -euo pipefail
+
+MSG_FILE="${1:?}"
+
+if [[ ! -f "$MSG_FILE" ]]; then
+  exit 0
+fi
+
+# Portable in-place sed (GNU vs BSD).
+strip_cursor_trailers() {
+  grep -Ev '^Co-authored-by:[[:space:]]*Cursor[[:space:]]*<' "$MSG_FILE" > "${MSG_FILE}.tmp" || true
+  if [[ -s "${MSG_FILE}.tmp" ]] || [[ ! -s "$MSG_FILE" ]]; then
+    mv "${MSG_FILE}.tmp" "$MSG_FILE"
+  else
+    rm -f "${MSG_FILE}.tmp"
+  fi
+}
+
+strip_cursor_trailers

.github/workflows/api.yml

@@ -18,6 +18,15 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+      - name: Ensure cron scripts are executable
+        run: |
+          cd api
+          for f in crons/cron_*.sh crons/_compose_run.sh; do
+            if [ ! -x "$f" ]; then
+              echo "$f is not executable (missing chmod +x)"
+              exit 1
+            fi
+          done
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@v4
         with:
@@ -37,7 +46,7 @@ jobs:
       - name: Upgrade pip (CVE-2026-1703)
         run: |
           cd api
-          poetry run pip install --upgrade 'pip>=26.0'
+          poetry run pip install --upgrade 'pip>=26.1.2'
       - name: Check formatting with black and isort
         run: |
           cd api
@@ -93,6 +102,28 @@ jobs:
           sys.exit(1)
           PY
 
+  # Pure unit tests: SMTP + templates + threshold helpers (no PRISM_ALERTS_DATABASE_URL).
+  alert_workers_unit_no_db:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - uses: snok/install-poetry@v1
+        with:
+          version: 2.3.3
+          virtualenvs-create: true
+          virtualenvs-in-project: true
+      - name: Install API dependencies
+        run: |
+          cd api
+          poetry install
+      - name: pytest test_alert_workers_no_db
+        run: |
+          cd api
+          PYTHONPATH=. poetry run pytest prism_app/tests/test_alert_workers_no_db.py -v --tb=short
+
   # Trivy: OS + language packages inside the built images (pip-audit above is Poetry-only).
   docker_image_cve_scan:
     name: Docker CVE scan (${{ matrix.image_label }})
@@ -141,7 +172,7 @@ jobs:
       - name: Run tests
         run: cd api && make api-test
 
-  # Ephemeral Postgres: alembic upgrade → Node schema contract + worker smoke → API tests
+  # Ephemeral Postgres: alembic upgrade → Python alerts schema smoke → API tests
   # (alerts CRUD, /stats fixture, admin list routes, alembic_version).
   alerts_db_alembic_and_alerting:
     runs-on: ubuntu-latest
@@ -181,23 +212,15 @@ jobs:
       - name: Upgrade pip (CVE-2026-1703)
         run: |
           cd api
-          poetry run pip install --upgrade 'pip>=26.0'
+          poetry run pip install --upgrade 'pip>=26.1.2'
       - name: Alembic upgrade head
         run: cd api && poetry run alembic upgrade head
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "20"
-      - name: Alerting install and DB checks
-        env:
-          PUPPETEER_SKIP_DOWNLOAD: "true"
-          PUPPETEER_SKIP_CHROMIUM_DOWNLOAD: "true"
+      - name: Alerts DB contract + pool smoke + worker smoke (Python)
         run: |
-          cd alerting
-          yarn install --frozen-lockfile
-          yarn setup:common
-          yarn check-alerts-db-contract
-          yarn smoke-alerts-db-pool
-          yarn smoke-alerting-workers
+          cd api
+          PYTHONPATH=. poetry run python -m prism_app.ci.alert_db_contract
+          PYTHONPATH=. poetry run python -m prism_app.ci.alert_db_smoke
+          PYTHONPATH=. poetry run python -m prism_app.workers.alert_runner smoke
       - name: API alerts integration tests (same database)
         env:
           # Ubuntu runner Poetry venv has rasterio but not a full gdal_calc CLI like the API Docker image.